Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/09/75e659-092f-4ee4-8718-7519e105aeda/1/8AoiTeba0aHtExtflbgyMaKryvE.mft
File: 8AoiTeba0aHtExtflbgyMaKryvE.mft (raw, json)
Hash identifier: JFPPrNpGoy0d/KIARsUExJXUSGVE8oJtBzKqrlYpf9U=
Subject key identifier: BB:D9:44:92:7D:29:65:68:AB:16:1F:65:18:A6:41:99:1A:A7:20:80
Authority key identifier: F0:0A:22:4D:E6:DA:D1:A1:ED:13:1B:5F:95:B8:32:31:A2:AB:CA:F1
Certificate issuer: /CN=f00a224de6dad1a1ed131b5f95b83231a2abcaf1
Certificate serial: 01967642D57DED4D20CE7E424715695D5208
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/8AoiTeba0aHtExtflbgyMaKryvE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/09/75e659-092f-4ee4-8718-7519e105aeda/1/8AoiTeba0aHtExtflbgyMaKryvE.mft
Manifest number: 0219
Signing time: Sun 27 Apr 2025 08:00:13 +0000
Manifest this update: Sun 27 Apr 2025 08:00:13 +0000
Manifest next update: Mon 28 Apr 2025 08:00:13 +0000
Files and hashes: 1: 8AoiTeba0aHtExtflbgyMaKryvE.crl (hash: f4nibL9MOjX3A1gESAy8KYYnv+wa9Lfbx6/V+DEwMhg=)
2: GWuRNScxtrzO8_nSAwKtJ8krFKo.roa (hash: BtQh9X2ueT8vHmbHjBYpzs9GSTTXkl7BLVZXjmS8mp0=)
3: TBV8XL8EuJ9o9oGzIzm8EoRgBys.roa (hash: 0Cql4kgvd07ySH8Z69IoKjqLLTAd4hRTfVwaM91rMF0=)
4: qHH2o0DyGGvFZsG0UvDbftuaafE.roa (hash: kKq7Omvw8T994nGi5bKJ+ng+xxGY7/jkfWqujpmbzDo=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/09/75e659-092f-4ee4-8718-7519e105aeda/1/8AoiTeba0aHtExtflbgyMaKryvE.crl
rsync://rpki.ripe.net/repository/DEFAULT/09/75e659-092f-4ee4-8718-7519e105aeda/1/8AoiTeba0aHtExtflbgyMaKryvE.mft
rsync://rpki.ripe.net/repository/DEFAULT/8AoiTeba0aHtExtflbgyMaKryvE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 28 Apr 2025 05:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:76:42:d5:7d:ed:4d:20:ce:7e:42:47:15:69:5d:52:08
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f00a224de6dad1a1ed131b5f95b83231a2abcaf1
Validity
Not Before: Apr 27 08:00:13 2025 GMT
Not After : Apr 28 08:00:13 2025 GMT
Subject: CN=bbd944927d296568ab161f6518a641991aa72080
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:85:a6:82:a1:c7:3f:b0:7a:4b:36:24:b6:54:66:
f4:04:01:dd:b9:5b:b7:b4:e8:2e:87:f3:fd:2f:84:
cc:40:50:14:6c:bc:8e:8e:e5:89:f5:a0:66:a2:29:
30:33:b4:cc:7a:c6:fd:52:a3:ca:a0:9c:ba:1b:76:
c1:a3:ed:48:8b:43:19:d0:da:36:2a:00:f5:d2:13:
8b:b7:00:34:f7:39:43:2c:b4:61:bc:ce:b5:fa:5f:
9a:25:a1:df:d9:b9:33:a2:8f:fc:81:7d:bf:30:30:
72:51:fc:a7:8a:25:d1:df:5d:78:a3:ed:d6:59:c8:
31:71:c2:aa:cf:f8:2b:ea:e3:57:f1:2d:1c:87:46:
c1:fe:7a:d6:10:82:f5:f1:be:8e:68:c1:be:13:b0:
2b:4d:74:e5:43:82:e8:70:7c:ca:59:fb:72:62:bd:
74:d7:75:36:8e:79:af:7f:54:5c:4b:77:ce:50:ae:
43:9f:08:6c:e2:b9:f5:0d:08:cc:da:8b:23:57:0d:
4e:17:a4:8e:e3:7e:f0:98:50:98:a9:04:d0:ef:54:
09:91:a2:7c:35:d6:49:95:58:14:f6:bd:64:24:a1:
f7:ea:f8:06:b4:cb:09:5b:1f:f2:09:75:d4:82:f6:
35:a0:4f:02:e3:be:cf:c4:84:dd:2e:8e:d8:f9:8a:
47:e1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BB:D9:44:92:7D:29:65:68:AB:16:1F:65:18:A6:41:99:1A:A7:20:80
X509v3 Authority Key Identifier:
keyid:F0:0A:22:4D:E6:DA:D1:A1:ED:13:1B:5F:95:B8:32:31:A2:AB:CA:F1
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/8AoiTeba0aHtExtflbgyMaKryvE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/09/75e659-092f-4ee4-8718-7519e105aeda/1/8AoiTeba0aHtExtflbgyMaKryvE.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/09/75e659-092f-4ee4-8718-7519e105aeda/1/8AoiTeba0aHtExtflbgyMaKryvE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
8b:45:d9:c0:72:37:e9:66:eb:96:8c:12:e6:1e:3d:00:17:2e:
a0:bf:2c:6f:00:34:6e:b8:b4:ea:3c:e3:74:5d:ad:19:54:99:
be:c2:1a:57:db:12:54:54:ee:5a:50:52:b4:b4:80:37:1d:b0:
f5:32:75:4d:fe:17:26:cc:18:70:7b:9b:02:0a:cc:39:be:37:
66:f3:cd:2e:d0:a7:1c:91:f2:f8:ab:ed:00:31:ef:3a:2f:25:
0a:26:b2:9c:04:56:8b:59:fb:56:ba:92:7c:4f:ac:81:7d:63:
4f:ab:99:72:02:33:3f:b1:2b:8a:b3:75:cc:6c:9e:df:89:f5:
aa:eb:26:8d:95:2e:ea:6f:57:b9:4c:75:2b:f3:62:36:ee:56:
00:ad:b1:b4:f7:14:fb:1f:db:75:2f:01:fa:76:d7:80:35:09:
ae:2d:cd:38:b5:f0:8e:6b:fb:d3:99:98:0c:0d:66:cb:17:f1:
db:56:05:7d:23:f0:40:b9:7b:b6:01:b7:a1:f3:9d:ff:d6:50:
e6:29:18:7e:95:c1:53:7b:fe:9d:4d:5b:92:db:2d:45:05:8a:
35:1a:b1:d0:8c:c3:75:19:42:97:2c:41:bd:aa:40:fe:31:11:
57:56:91:2e:50:2a:ad:01:8e:6f:b0:e9:d3:7b:c8:bb:c0:e4:
66:db:ed:3d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 27 11:16:51 2025 by rpki-client